Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/119a598d-1bc0-307d-bbb4-68fd60f9a48a.roa
File:                     119a598d-1bc0-307d-bbb4-68fd60f9a48a.roa (raw, json)
Hash identifier:          7sooY/a6GmX4df3K4fIoTfFSRdQenQTINOaRHfnOsJo=
Subject key identifier:   D7:90:64:D5:BB:B7:B4:24:95:27:98:CF:7A:4E:DA:B7:16:A8:C3:A1
Certificate issuer:       /CN=505332f5-c843-4e04-add6-4ef51984b8f2
Certificate serial:       010D0C9F4328583D5A25F411408B5026D12FB880
Authority key identifier: 4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/119a598d-1bc0-307d-bbb4-68fd60f9a48a.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Fri 29 Apr 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        96.127.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5a:25:f4:11:40:8b:50:26:d1:2f:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505332f5-c843-4e04-add6-4ef51984b8f2
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Apr 29 04:00:00 2022 GMT
        Subject: CN=e2e94048-9b73-4fa8-a7b4-1cf0203ded17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:6c:a5:70:17:f8:89:60:45:32:50:ba:e6:
                    6c:23:1c:91:6a:1f:c6:00:15:41:ca:54:89:d2:b7:
                    83:56:a1:19:af:89:3f:ed:05:e2:28:6d:1c:06:9a:
                    d9:44:ca:eb:eb:00:f1:25:a1:40:bc:34:75:ff:c9:
                    5a:e8:b9:6a:14:93:09:08:18:fd:bb:09:b8:0c:a5:
                    13:a5:4e:03:ee:c0:c0:ce:46:48:31:2c:90:2b:47:
                    f8:41:e8:48:3f:67:b1:eb:3f:bf:9c:df:9e:c4:3d:
                    86:31:7d:49:f2:9d:7f:78:98:0b:57:e6:f7:5d:d6:
                    ce:68:76:2a:b2:c6:fd:a6:db:7e:ec:f0:4a:b7:3e:
                    16:6e:c2:39:61:a8:dd:07:b1:21:d9:be:45:d1:a8:
                    32:79:4a:96:85:80:80:c1:b2:43:56:75:3b:f6:37:
                    6e:be:dd:d1:e1:96:1d:e0:a9:bb:9c:02:de:74:ab:
                    00:b1:2c:57:94:8e:10:ae:dd:6f:b4:ed:be:72:38:
                    61:03:b5:fe:e4:e3:b4:ee:6b:94:d0:c3:00:25:21:
                    b5:bd:34:0b:e5:32:9c:5c:96:c6:b6:5c:db:46:d0:
                    9b:2d:08:c5:6d:7f:d1:fe:40:6a:ff:e2:aa:54:a0:
                    00:ec:98:fd:c3:2b:15:27:81:17:f9:c7:27:d8:33:
                    e8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:64:D5:BB:B7:B4:24:95:27:98:CF:7A:4E:DA:B7:16:A8:C3:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/119a598d-1bc0-307d-bbb4-68fd60f9a48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2/505332f5-c843-4e04-add6-4ef51984b8f2.crl

            X509v3 Authority Key Identifier:
                keyid:4B:AF:0A:76:57:5E:C4:4D:30:4D:82:DE:3B:0F:0E:02:60:57:28:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/505332f5-c843-4e04-add6-4ef51984b8f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:41:cc:03:9c:a4:49:b1:16:57:a2:18:63:b2:e6:5c:b4:3c:
         6f:1f:01:ea:9f:da:b1:55:04:84:d5:c7:e8:ba:bd:53:c5:95:
         6c:84:3d:27:92:db:3b:6f:e9:dc:4a:2d:ae:68:b2:94:e4:3f:
         f8:8b:d4:c0:84:a1:56:fc:41:54:1b:d2:ba:4f:35:ba:66:bd:
         c4:4e:e0:a5:fa:22:d3:08:16:4f:41:6f:5f:ef:6b:b2:9f:0a:
         00:58:57:40:5e:05:4c:93:31:65:74:0b:92:ca:e9:2b:e2:62:
         86:b9:1d:9b:2a:5d:1d:65:a9:68:bf:b4:ca:6e:90:ee:b0:83:
         13:cf:3c:f3:a0:b6:88:a0:7f:0f:03:82:b5:b5:55:68:da:c6:
         eb:19:56:5c:0a:25:7a:73:94:30:1a:a4:72:50:a5:b9:fb:84:
         53:88:b0:ff:43:b2:60:86:13:34:98:06:ca:b1:51:16:ec:00:
         7d:34:7e:f5:23:e1:95:65:02:a3:8a:b0:6f:24:75:f6:eb:ba:
         7f:d7:b9:80:03:56:f8:ef:7f:60:7c:2b:36:7a:f3:60:73:bc:
         f3:39:fc:7f:be:fe:a9:9e:cf:37:f8:54:9b:3f:ef:bd:35:91:
         df:a0:84:19:15:87:9b:06:7a:0f:a6:c2:95:23:ab:f4:8b:cf:
         5a:3c:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:13 2023 by rpki-client on console-ams.rpki-client.org